Behavior when a session expires while posting on the bulletin board
Written By
Shimada Taro
How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!
While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.
Legacy Article
You are viewing an article from our legacy "FastTrack"
publication program, made available for informational purposes. Articles
in this program were published without a requirement for independent
editing or verification and are provided"as is" without
guarantee.
Before using any information from this article, independently verify its
suitability for your situation and project.
Issue
What happens if I am editing a thread or message on the BBS widget and the session expires without posting, what happens if I press "publish"?
Environment
DXP 7.0+
solution
If you are editing a thread or message on the bulletin board portlet and your session expires without posting, press "Publish" to go to the login screen.
If you log in again, the following warning message will be thrown because the current session information cannot be used to authenticate access to the original screen. WARN [ajp-nio-41304-exec-138][SecurityPortletContainerWrapper:348] User XXXXX is not allowed to access URL http://XXX/ and portlet com_liferay_message_boards_web_ portlet_MBPortlet
When the user logs in again, a new session is created. Because the session IDs do not match, the "unpublished edits" associated with the old session ID are discarded.This is an action to prevent CSRF attacks.
When accessing a page that requires authentication while the session is expired, the user will be redirected to the login screen.
This website uses cookies and similar tools, some of which are provided by third parties (together “tools”). These tools enable us and the third parties to access and record certain user-related and activity data and to track your interactions with this website. These tools and the informationcollected are used to operate and secure this website, enhance performance, enable certain website features and functionality, analyze and improve website performance, and personalize user experience.
If you click “Accept All”, you allow the deployment of all these tools and collection of the information by us and the third parties for all these purposes.
If you click “Decline All” your IP address and other information may still be collected but only by tools (including third party tools) that are necessary to operate, secure and enable default website features and functionalities. Review and change your preferences by clicking the “Configurations” at any time.
Visit our Privacy Policy